Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
File:                     df64e67f-d3d6-364f-a088-ad6e4759cafb.roa (raw, json)
Hash identifier:          SuI8fizRAHNtSumFDIQpAzrnH7utIe1rQnaRfK6njNc=
Subject key identifier:   08:21:CE:81:C8:D1:95:96:80:AC:E5:0E:C8:28:65:35:32:5B:FA:90
Certificate issuer:       /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial:       010D0C9F4328584EFF777EB93D9BBFAB95C42560
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     53454
IP address blocks:        104.225.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:7e:b9:3d:9b:bf:ab:95:c4:25:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=b660fdd9-7c56-437e-82df-22a020909c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3f:9c:d2:f3:4e:b2:ab:a7:12:57:2e:34:c7:
                    f2:3b:0b:9b:d8:49:0d:4d:a3:b4:dc:4f:65:a1:4a:
                    01:fb:51:18:bc:68:74:61:3c:38:ec:26:d5:a1:36:
                    c5:05:fc:6a:8a:04:bd:15:88:4a:de:bc:07:2c:30:
                    76:7e:bc:f8:ec:93:79:53:2f:2d:a7:f0:a0:f3:b3:
                    4e:f8:46:1c:81:fc:4a:9b:a7:fb:96:4d:de:bf:a9:
                    7e:1b:0e:da:20:95:90:34:53:44:f2:27:e5:89:c2:
                    29:86:05:a2:14:8f:46:b8:71:b6:b3:c6:f4:65:d8:
                    3b:06:e8:11:e9:1a:95:2a:f3:29:15:f1:b3:92:63:
                    90:46:04:7e:d2:cf:de:b6:c4:d1:30:b2:96:f9:0d:
                    d1:cf:fa:70:53:4e:0c:ce:84:47:1d:7e:15:f3:a4:
                    32:8b:e1:12:66:7d:78:e6:08:b1:a6:3b:45:04:17:
                    84:d9:30:d5:98:28:73:ef:13:9c:c6:99:2d:47:ff:
                    62:dd:c8:c7:b2:9a:88:f9:36:da:0f:54:1f:db:0e:
                    f6:88:4a:9b:44:4e:9a:d8:83:fb:cb:4c:9e:66:c1:
                    58:6f:f8:5b:de:10:85:bc:13:66:df:0c:cb:4a:7a:
                    b0:fb:22:ef:da:2b:e3:70:65:80:4f:0c:40:54:61:
                    1f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:CE:81:C8:D1:95:96:80:AC:E5:0E:C8:28:65:35:32:5B:FA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/df64e67f-d3d6-364f-a088-ad6e4759cafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl

            X509v3 Authority Key Identifier:
                keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.225.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fe:e2:45:99:fd:70:46:eb:52:86:a6:90:3e:53:56:ed:db:
         b7:41:1f:14:bb:c1:df:b8:44:05:14:04:d2:6e:2b:b7:36:f6:
         c5:28:a2:00:a8:c6:78:7c:42:ec:e5:f9:77:6a:40:74:ea:ae:
         1a:6a:51:3d:f7:92:cf:5c:d7:b1:de:35:9c:84:3f:19:59:72:
         be:c7:2a:51:d0:7a:1b:a2:73:b4:bf:39:42:36:ad:68:1b:20:
         42:2d:bf:aa:a4:de:4b:0d:1b:14:de:d2:a0:3f:cf:f1:9b:a1:
         57:27:3d:d0:68:df:b1:7b:46:4c:a9:43:62:4a:bd:d9:38:09:
         24:38:d2:f8:97:db:34:c8:e7:de:e4:6e:4b:37:17:0a:a4:90:
         f1:e8:10:4c:4c:9c:62:a7:f8:5e:cc:df:65:9b:24:1f:ba:b6:
         eb:b4:a0:83:77:e5:92:9a:35:6a:6e:2d:fa:9e:33:14:6c:e0:
         cc:22:fe:cb:76:4a:36:68:3e:00:4f:26:dd:17:f3:90:c6:06:
         40:71:8b:65:b7:32:93:9d:28:e0:35:38:66:21:0c:59:1e:25:
         5d:97:fd:63:87:3d:3c:d9:e0:bb:22:ab:8f:a6:b3:bd:0b:fa:
         40:99:9c:4d:4b:72:a2:1d:e6:ea:3b:60:74:fb:a2:92:cc:2b:
         38:fb:7f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:34:15 2026 by rpki-client